Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230332e302f32342d3234203d3e203538353532.roa
File:                     3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          5nHttwljCkgbZvT5Gd5yPlqYbfCXiuFL0MROzp1WkJQ=
Subject key identifier:   10:B7:EF:69:0C:59:F4:E3:58:E9:13:19:B5:DE:F0:57:2B:D0:3D:8B
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       3065127A03E27E8204D4676A61461E127F3FFF9A
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230332e302f32342d3234203d3e203538353532.roa
Signing time:             Mon 04 Sep 2023 14:00:00 +0000
ROA not before:           Mon 04 Sep 2023 13:55:00 +0000
ROA not after:            Mon 02 Sep 2024 14:00:00 +0000
asID:                     58552
IP address blocks:        202.72.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 08:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:12:7a:03:e2:7e:82:04:d4:67:6a:61:46:1e:12:7f:3f:ff:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Sep  4 13:55:00 2023 GMT
            Not After : Sep  2 14:00:00 2024 GMT
        Subject: CN=10B7EF690C59F4E358E91319B5DEF0572BD03D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:49:27:5b:16:6d:69:03:aa:d3:13:a5:c5:
                    54:6d:61:b6:9a:3e:57:e1:77:6c:c0:3f:d1:40:4b:
                    ea:fd:9e:e9:7b:6e:1f:2c:d5:e2:93:48:c4:83:df:
                    b1:e1:27:fd:79:42:56:4a:0a:62:5e:01:4a:c9:1d:
                    7d:5b:56:a4:0e:32:5a:f1:6c:d6:74:8e:28:15:92:
                    ee:d7:0e:3f:47:b4:6d:3b:1c:a1:44:89:8c:05:65:
                    85:43:b9:ca:e9:dd:bf:9e:73:84:33:51:20:35:40:
                    b8:53:67:26:28:cd:01:cf:54:8d:31:78:4d:f3:1a:
                    1b:c4:4d:0f:37:70:97:2c:b6:40:3f:36:1d:c5:8f:
                    34:c0:74:af:aa:30:49:96:93:98:82:1b:1a:f5:18:
                    4f:1b:22:44:f8:5f:57:4d:84:46:b7:45:06:44:fd:
                    b6:dc:0b:70:54:a1:0d:7a:98:62:e3:4c:10:6f:92:
                    7c:2f:9f:16:c3:4d:9d:f1:62:d0:6d:c9:7e:94:06:
                    59:6f:e2:25:4c:c6:04:92:d7:7c:ad:b9:07:7c:c3:
                    a4:9a:c0:6f:39:ea:13:11:f5:d6:03:fd:2a:5a:57:
                    b8:fc:f1:18:65:5b:eb:2f:c1:48:8f:fb:e7:a0:30:
                    d9:17:e3:3d:48:2c:e6:38:32:f9:1b:e3:63:a5:47:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B7:EF:69:0C:59:F4:E3:58:E9:13:19:B5:DE:F0:57:2B:D0:3D:8B
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230332e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ae:8d:54:4e:51:ba:54:b3:06:eb:c6:bf:4b:51:e2:6e:18:
         0f:ca:89:e1:55:6e:2d:70:1f:26:02:79:6f:7f:76:48:ab:25:
         32:8f:bf:51:76:f8:27:17:e8:f6:19:c8:1c:da:03:1c:82:c2:
         d6:4e:67:c2:40:7d:a1:5c:17:91:c4:f9:61:f9:57:94:a7:59:
         49:83:65:aa:cc:f4:6d:30:72:cf:fe:58:e1:ba:b7:d0:04:e2:
         38:b5:11:f6:88:9e:5f:73:b2:b1:78:d3:19:8c:9d:ec:46:9f:
         6b:e8:9d:d3:99:00:9a:b9:be:17:63:48:95:f8:75:eb:8f:59:
         a6:51:36:16:3c:4e:cb:c4:dd:ec:b4:b2:bd:0f:42:58:ce:78:
         11:13:8b:f7:cf:b9:49:a9:be:9f:8a:22:71:86:dc:5d:24:56:
         73:c8:eb:f6:53:9c:bc:ee:0a:fc:a8:80:76:e9:80:38:92:aa:
         46:22:d6:10:5a:72:a8:fb:24:94:fb:f5:f5:f8:71:18:a1:22:
         8e:4d:65:aa:56:67:75:5e:42:c5:8a:e8:d5:4a:2c:09:e7:37:
         2d:be:af:ae:ca:76:7b:03:c4:53:41:16:a5:68:5e:5d:9b:e4:
         bb:b2:b2:2f:86:dc:14:6b:af:53:de:c0:f3:c0:47:77:4c:f5:
         d2:d4:73:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:50:11 2024 by rpki-client on console-fra.rpki-client.org